April 21 PSN and Qriocity outage - Page 4 - Canadian TV, Computing and Home Theatre Forums

PokerChip · 2011-04-26, 04:41 PM

Yeah, I must say I am not impressed. Seems like PR101 to let people know about their personal info getting out there, although they're not fully admitting to that.

The fecal matter is about to hit the fan once mainstream media gets on it.

Tezster · 2011-04-26, 05:12 PM

This is huge, and quite upsetting.

If Sony have known about personal information having been compromised since day one, but only made a statement about it now... wow... that's bordering on negligence.

This is well beyond simply losing access to a free online service for a few days.

hugh · 2011-04-26, 05:35 PM

I leave my CC number on file with iTunes but I never trusted Sony's implementation so I never gave them my credit card number. Guess that turned out to be a wise decision.

If I had though, I would be furious right now because everything on that blog page is U.S.A. What about Canadians or citizens of other countries? Surely a large number of the 75 million are outside the U.S. What is Sony doing for them? Do we know?

Shiningblade · 2011-04-26, 05:45 PM

I just got off the phone with Sony and they say it effects ALL PSN users, including Canadian ones.

Cheers

hugh · 2011-04-26, 05:45 PM

Sony says hackers obtained the following information about its users:

Name,
Address (city, state, zip)
Country,
Email Address,
Birthdate
PlayStation Network/Qriocity password
PlayStation Network/Qriocity login
PSN online ID.

The hackers may also have gleaned the following data about users:

Profile data
Purchase history and billing address (city, state, zip)
PlayStation Network/Qriocity password security answers
All of the above information for authorized sub-accounts

The company is unsure whether credit card data was taken.

Inzane · 2011-04-26, 05:45 PM

Thanks for the clarification guys. Now I properly understand the depths of concern for the average Sony PSN user.

I guess I should be glad I've procrastinated on "pluggin in" my PS3.

PS - Regarding itunes, I just keep feeding it itunes gift cards rather than my credit card. I've always felt safer doing it that way.

timmy1 · 2011-04-26, 07:07 PM

I look at that statement and wonder if they were storing credit card info and passwords in plaintext. You would think that they would want to mention that some of the info was hashed if that was their practice. Regardless, I'm ditching my PS3 in short order. Sony has repeatedly demonstrated that they don't care much for their customers. Too bad -- I really loved my Sony Walkman back in '83.

audacity · 2011-04-26, 07:34 PM

Quote:

Originally Posted by timmy1

I look at that statement and wonder if they were storing credit card info and passwords in plaintext. You would think that they would want to mention that some of the info was hashed if that was their practice.

I too find that interesting. Were the passwords stored in plaintext, were they hashed (so they could be discovered using rainbow tables), or were they hashed with a salt to prevent rainbow table techniques to reverse the hash.

madhi19 · 2011-04-26, 08:03 PM

Yeah if you been using the same password for PSN and a few other place now might be wise to change them all!

Eluder · 2011-04-26, 08:21 PM

So what the heck do we do now with regards to our security?

I mean if these hackers have all our pertinent info, how do we protect ourselves?

timmy1 · 2011-04-26, 08:27 PM

Quote:

I mean if these hackers have all our pertinent info, how do we protect ourselves?

If you've used the same password anywhere else, change it. And keep checking your credit card bill. You might even want to cancel your card. Other than that, there's not much we can do. Well, except never trust Sony with our info again.

Inzane · 2011-04-26, 09:19 PM

Ok, hang on a sec.

I can understand people being mad at Sony because it took so long for them to communicate the extent they were compromised.

But some of you guys also sound mad just at the fact that Sony got hacked. Why? Do you think your data is really any safer with: Amazon? Paypal? Ebay? Facebook? Steam? Your own bank website? etc.

Couldn't this kind of external intrusion happen to any big corporation?

GrimJack · 2011-04-26, 09:38 PM

The scope of the breech seems to indicate that Sony wasn't following any of the best practices for securing confidential information.

This isn't data that needs to be highly available and it's possible to structure it so that you can only access information on a person with a shared secret (Like say a hash of their password)

The database servers shouldn't have been accessible enough to compromise just because the external facing servers were.

madhi19 · 2011-04-26, 10:01 PM

Quote:

Originally Posted by timmy1

If you've used the same password anywhere else, change it. And keep checking your credit card bill. You might even want to cancel your card. Other than that, there's not much we can do. Well, except never trust Sony with our info again.

Am thinking class action lawsuit might be in order but I bet they covered everything in the freaking eula! Sony will have to do something really juicy to calm peoples down.

Eluder · 2011-04-26, 10:06 PM

Well they've lost me as a customer of PSN; I am currently a PSN+ subscriber, but I'm definitely not renewing now.

I think Sony is going to be tanking for a little while until they can reassure all their customers that their systems are once again secure.

2011-04-26, 04:41 PM	#46
PokerChip Veteran Join Date: Sep 2004 Location: New house and HT, Shaw Gateway + 4 portals, BB50 Posts: 2,209	Yeah, I must say I am not impressed. Seems like PR101 to let people know about their personal info getting out there, although they're not fully admitting to that. The fecal matter is about to hit the fan once mainstream media gets on it. __________________ Pics of my Home Theatre Updated May 2013: http://www.flickr.com/photos/6168808...57626366077975

2011-04-26, 05:12 PM	#47
Tezster Veteran Join Date: Oct 2005 Location: Mississauga Posts: 1,985	This is huge, and quite upsetting. If Sony have known about personal information having been compromised since day one, but only made a statement about it now... wow... that's bordering on negligence. This is well beyond simply losing access to a free online service for a few days. __________________ My Living Room HT setup

2011-04-26, 05:35 PM	#48
hugh Member #1 Join Date: Dec 2001 Location: Toronto Posts: 47,501	I leave my CC number on file with iTunes but I never trusted Sony's implementation so I never gave them my credit card number. Guess that turned out to be a wise decision. If I had though, I would be furious right now because everything on that blog page is U.S.A. What about Canadians or citizens of other countries? Surely a large number of the 75 million are outside the U.S. What is Sony doing for them? Do we know? __________________ As of January 2012, I am no longer the owner of the Digital Home website. If you have questions about the operation of the site, please contact VSAdmin. For personal inquiries contact me at the Hugh Thompson website.

2011-04-26, 05:45 PM	#50
hugh Member #1 Join Date: Dec 2001 Location: Toronto Posts: 47,501	Sony says hackers obtained the following information about its users: Name, Address (city, state, zip) Country, Email Address, Birthdate PlayStation Network/Qriocity password PlayStation Network/Qriocity login PSN online ID. The hackers may also have gleaned the following data about users: Profile data Purchase history and billing address (city, state, zip) PlayStation Network/Qriocity password security answers All of the above information for authorized sub-accounts The company is unsure whether credit card data was taken. __________________ As of January 2012, I am no longer the owner of the Digital Home website. If you have questions about the operation of the site, please contact VSAdmin. For personal inquiries contact me at the Hugh Thompson website.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

2011-04-26, 05:45 PM	#49
Shiningblade Join Date: May 2008 Location: Capital of the Great White North Posts: 252	I just got off the phone with Sony and they say it effects ALL PSN users, including Canadian ones. Cheers

2011-04-26, 05:45 PM	#51
Inzane Join Date: Mar 2010 Location: Edmonton (area), AB Posts: 422	Thanks for the clarification guys. Now I properly understand the depths of concern for the average Sony PSN user. I guess I should be glad I've procrastinated on "pluggin in" my PS3. PS - Regarding itunes, I just keep feeding it itunes gift cards rather than my credit card. I've always felt safer doing it that way.

2011-04-26, 07:07 PM	#52
timmy1 Join Date: Jun 2006 Location: Toronto Posts: 258	I look at that statement and wonder if they were storing credit card info and passwords in plaintext. You would think that they would want to mention that some of the info was hashed if that was their practice. Regardless, I'm ditching my PS3 in short order. Sony has repeatedly demonstrated that they don't care much for their customers. Too bad -- I really loved my Sony Walkman back in '83.

2011-04-26, 08:03 PM	#54
madhi19 Join Date: Jun 2010 Posts: 363	Yeah if you been using the same password for PSN and a few other place now might be wise to change them all!

2011-04-26, 08:21 PM	#55
Eluder Join Date: Jan 2007 Location: Toronto Posts: 1,446	So what the heck do we do now with regards to our security? I mean if these hackers have all our pertinent info, how do we protect ourselves?

2011-04-26, 09:19 PM	#57
Inzane Join Date: Mar 2010 Location: Edmonton (area), AB Posts: 422	Ok, hang on a sec. I can understand people being mad at Sony because it took so long for them to communicate the extent they were compromised. But some of you guys also sound mad just at the fact that Sony got hacked. Why? Do you think your data is really any safer with: Amazon? Paypal? Ebay? Facebook? Steam? Your own bank website? etc. Couldn't this kind of external intrusion happen to any big corporation?

2011-04-26, 09:38 PM	#58
GrimJack Join Date: Jun 2006 Posts: 216	The scope of the breech seems to indicate that Sony wasn't following any of the best practices for securing confidential information. This isn't data that needs to be highly available and it's possible to structure it so that you can only access information on a person with a shared secret (Like say a hash of their password) The database servers shouldn't have been accessible enough to compromise just because the external facing servers were.

2011-04-26, 10:06 PM	#60
Eluder Join Date: Jan 2007 Location: Toronto Posts: 1,446	Well they've lost me as a customer of PSN; I am currently a PSN+ subscriber, but I'm definitely not renewing now. I think Sony is going to be tanking for a little while until they can reassure all their customers that their systems are once again secure.